Skip to main content

Route exclusion and inclusion

In situations where you require a specific percentage of route coverage for security reasons, Contrast provides an option to exclude irrelevant or inaccessible routes from route coverage calculations.

You can choose to re-include any routes that you excluded previously.

Including or excluding routes requires an Admin role.

Effects of route exclusion

  • Contrast collects vulnerability data for excluded routes, but excludes this data from application scoring calculations.

  • Excluding a route excludes it from all environments where Contrast discovers it.

  • If you defined session metadata to exercise and discover routes in an application, excluding a route also excludes this data.

  • The audit log includes an entry for each route that you exclude.

Effects of route inclusion

  • Contrast includes data for the included route in application scoring calculations.

  • Including a route includes it in all environments where Contrast discovers it.

  • The audit log includes an entry for each route that you include.